← All posts// How it's built

Local-first, end-to-end encrypted by default

Jun 2026 · 3 min read

Linkman is local-first: your links live on your device, in the browser's own storage (OPFS), as a conflict-free replicated data type (CRDT). That's why it opens instantly and keeps working with no connection — there's no server round-trip to read your own data.

Encrypted before it leaves

Every change is sealed with AES-256-GCM on your device before it's ever sent. The sync relay stores only that ciphertext, keyed by opaque IDs — it can't see your URLs, titles, notes, or which sites you save. There's nothing to leak in a breach because there's no plaintext to begin with.

Sync without a middleman who can read you

Because the data type is conflict-free, your paired devices converge automatically — save on your laptop, it's on your phone, even if both were briefly offline. The pairing handshake is what lets a new device join that private circle without the relay ever holding a key.

No account, no password

Identity is a per-device keypair, not an email and password. There's no login to phish and no central account to compromise — just your devices, vouching for each other.

Try it — open Linkman